Re: [Masque] MASQUE detection through tracking trackers

[Stephen Farrell <[e-mail]>]

Hiya,

On 05/11/2019 21:19, Töma Gavrichenkov wrote:
> Peace,
> 
> On Tue, Nov 5, 2019, 11:49 PM David Schinazi <[e-mail]>
> wrote:
> 
>> Thanks for bringing this to the list! I really feel like this kind of
>> traffic analysis is going to be hard to work around.
>>
> 
> Sure.  I volunteer to work on this if I won't be the only one to.

Me too, (though perhaps feebly;-)

In terms of venue, I agree with Christian that pearg seems
like it'd be a good home for related work at least up to
the point where someone had a proposal for an IETF WG or
some such. (Which I can't see happening that soon.)

As to the meat of the topic, in addition to what's already
been said, we could also try to influence the baseline set
of traffic patterns, e.g. by encouraging browser makers to
embed and enable-by-default behaviours that result in
traffic patterns closer to those currently seen for happy
NoScript users (like me:-). To some extent, that's slowly
starting to happen already, but I could imagine something
like a BCP asserting that IETF protocol development ought
try minimise the extent to which use of our protocols
enables traffic analysis based attacks or profiling. (I
suspect we could write that text now but that we need more
research done before it'd be more than a "best aspirational
practice";-)

Cheers,
S.


> 
> --
> Töma
> 
>>
> 
>